Worth noting that open-source projects where your password store is saved locally are vulnerable to the same attack.